[security] Initial skeleton